$ rpki-client -vvf rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa File: 17BA5658D1FA11EDA0A31C2FC4F9AE02.roa (raw, json) Hash identifier: STCKrvlRsuBwgCCitF/41y1bZsQULp/xbRwSRQTsp2k= Subject key identifier: 76:3E:46:1E:2E:02:1C:DD:F8:AB:0B:76:6E:50:7C:02:63:9F:97:BC Certificate issuer: /CN=A917CABB/serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Certificate serial: 0CAA Authority key identifier: DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:54:25 +0000 ROA not before: Mon 22 Sep 2025 19:09:33 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 139326 IP address blocks: 103.141.70.0/23 maxlen: 23 103.141.70.0/24 maxlen: 24 103.141.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3242 (0xcaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CABB, serialNumber=DC57A3997B5F7CE8FBC9B4D98B3D45D633077118 Validity Not Before: Sep 22 19:09:33 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a44511-dc22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:53:89:7a:31:75:cc:9e:99:d0:00:af:8c: 4a:96:6c:47:63:55:4f:22:b0:08:06:a8:30:23:ab: fd:6b:5a:6f:f7:86:c4:74:5e:5e:ea:67:a9:e0:c1: a4:6e:38:4b:31:69:f4:b5:4e:e7:9d:aa:2d:a5:dd: 98:01:48:57:c6:d0:bd:dc:5a:2b:8c:b9:2f:db:60: c8:55:8a:8e:3a:1e:43:4f:d2:35:ae:d5:7c:4a:5e: e2:81:4b:e7:83:98:d1:4c:61:85:ca:65:c6:3a:22: 1f:9c:47:4a:3a:d7:83:a7:50:9d:63:bd:fd:25:0e: 24:56:91:a9:f8:ae:16:34:df:29:d7:a7:c4:39:cf: f9:2a:f6:13:89:a2:59:4f:aa:e3:dc:b3:7e:b7:ce: a2:af:d3:4f:ea:3c:a5:6e:40:00:77:b4:eb:24:9f: f1:0d:dd:4f:32:43:9b:02:43:ea:4e:05:21:f8:16: cf:6d:e6:2d:d4:08:c4:db:67:0d:3c:76:55:0c:1f: a2:c1:c5:d6:87:ee:99:6d:8f:a9:09:65:c4:6b:74: b8:25:b2:24:ed:d4:f3:94:f6:d9:b1:64:87:5e:1b: 5f:10:ed:f8:4f:ff:e2:c2:49:1f:10:e9:88:18:d7: 06:df:b9:aa:f8:16:c1:11:cc:2a:bb:82:96:f9:bf: f6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:3E:46:1E:2E:02:1C:DD:F8:AB:0B:76:6E:50:7C:02:63:9F:97:BC X509v3 Authority Key Identifier: keyid:DC:57:A3:99:7B:5F:7C:E8:FB:C9:B4:D9:8B:3D:45:D6:33:07:71:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/3FejmXtffOj7ybTZiz1F1jMHcRg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3FejmXtffOj7ybTZiz1F1jMHcRg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CABB/07675F1E0F6911EAA9D52650C4F9AE02/17BA5658D1FA11EDA0A31C2FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.141.70.0/23 Signature Algorithm: sha256WithRSAEncryption 90:c9:28:ca:b5:b8:2b:38:ec:70:9b:ee:4c:8b:5a:35:5b:15: 40:3b:00:62:a8:01:25:78:2a:1c:bd:90:63:db:c7:61:58:f7: b2:62:8b:fb:25:94:f2:54:e9:2b:16:8b:8f:a8:a8:61:c8:bb: 4c:83:90:22:b8:e4:f2:dd:a7:de:7e:ae:93:15:d5:e1:4f:84: 09:f3:45:a8:87:c6:0e:88:77:59:7f:7b:18:57:00:cd:0b:5e: 58:e3:10:28:d4:b2:ed:34:8c:ae:ab:69:f6:5a:6f:13:36:93: cc:3f:21:5c:1f:5c:04:fe:69:e0:7c:86:ee:ea:63:d9:38:e8: c5:ab:5a:6f:91:9c:4a:e4:c0:18:ca:6a:ba:53:13:47:b9:58: 7b:f8:bd:14:50:d0:9e:93:8a:aa:c8:1b:06:e9:0c:3d:22:ed: 66:1c:97:fc:3f:a4:28:79:f4:7e:20:0c:f6:0b:25:90:36:91: 3e:a7:a6:b1:90:8b:b3:82:31:f5:66:5e:d6:a8:41:b0:f6:c0: 29:e0:b5:7c:a5:38:8e:a6:0f:b5:31:82:97:33:85:7a:77:d4: 6d:64:a4:32:4c:37:ca:66:1b:6e:c4:f9:6e:cb:e1:fa:33:52: 47:5a:b1:64:fd:12:6e:bb:d8:09:80:77:42:bb:47:b2:99:3b: 81:9e:f6:32 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NBQkIxMTAvBgNVBAUTKERDNTdBMzk5N0I1RjdDRThGQkM5QjREOThCM0Q0NUQ2 MzMwNzcxMTgwHhcNMjUwOTIyMTkwOTMzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDUxMS1kYzIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwlTiXoxdcyemdAAr4xKlmxHY1VPIrAIBqgwI6v9a1pv94bEdF5e6mep4MGk bjhLMWn0tU7nnaotpd2YAUhXxtC93ForjLkv22DIVYqOOh5DT9I1rtV8Sl7igUvn g5jRTGGFymXGOiIfnEdKOteDp1CdY739JQ4kVpGp+K4WNN8p16fEOc/5KvYTiaJZ T6rj3LN+t86ir9NP6jylbkAAd7TrJJ/xDd1PMkObAkPqTgUh+BbPbeYt1AjE22cN PHZVDB+iwcXWh+6ZbY+pCWXEa3S4JbIk7dTzlPbZsWSHXhtfEO34T//iwkkfEOmI GNcG37mq+BbBEcwqu4KW+b/28QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHY+Rh4u Ahzd+KsLdm5QfAJjn5e8MB8GA1UdIwQYMBaAFNxXo5l7X3zo+8m02Ys9RdYzB3EY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0FCQi8wNzY3NUYxRTBG NjkxMUVBQTlENTI2NTBDNEY5QUUwMi8zRmVqbVh0ZmZPajd5YlRaaXoxRjFqTUhj UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNGZWptWHRmZk9qN3liVFppejFGMWpNSGNSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0NBQkIvMDc2NzVGMUUwRjY5MTFFQUE5RDUyNjUwQzRGOUFFMDIvMTdCQTU2NThE MUZBMTFFREEwQTMxQzJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBZ41GMA0GCSqGSIb3DQEBCwUAA4IBAQCQySjKtbgrOOxwm+5Mi1o1 WxVAOwBiqAEleCocvZBj28dhWPeyYov7JZTyVOkrFouPqKhhyLtMg5AiuOTy3afe fq6TFdXhT4QJ80Woh8YOiHdZf3sYVwDNC15Y4xAo1LLtNIyuq2n2Wm8TNpPMPyFc H1wE/mngfIbu6mPZOOjFq1pvkZxK5MAYymq6UxNHuVh7+L0UUNCek4qqyBsG6Qw9 Iu1mHJf8P6QoefR+IAz2CyWQNpE+p6axkIuzgjH1Zl7WqEGw9sAp4LV8pTiOpg+1 MYKXM4V6d9RtZKQyTDfKZhtuxPluy+H6M1JHWrFk/RJuu9gJgHdCu0eymTuBnvYy -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:15 2026 by rpki-client